docker executor pull policy